4 ms·

> the lower end Ryzen APUs, we won’t use the AI crap names, are not something we would deploy, anywhere, ever, due to the hardware security backdoor that is Plu

by 3np 2y ago

> the lower end Ryzen APUs, we won’t use the AI crap names, are not something we would deploy, anywhere, ever, due to the hardware security backdoor that is Pluton. If you think the latest Crowdstrike ‘whoopsie’ was bad, imagine it baked into hardware in the near future. First time I hear about Pluton and, wow, yeah, no joke. I guess it's on to other CPU architectures for us when it gets time to replace current generation... :\

jitl 2y ago
This is Microsoft’s version of Apple’s “Secure Enclave” root of trust on Apple silicon devices. I’m always surprised about the negative reaction to TPM or Pluton, given (what I perceive as) the positive security/privacy opinion on Secure Enclave
- deleted 2y ago
  [deleted]
- yoyohello13 2y ago
  You presumably opt-in to Secure Enclave when you by Apple. With all the new CPUs implementing Pluton you can't opt out. I'm sure Linux users aren't interested in a backdoor created by Microsoft.
  - lern_too_spel 2y ago
    The OS decides whether or not to expose it.
  - eightysixfour 2y ago
    What do you mean you can't opt out? It just turns into a normal TPM if the OS doesn't use it.
    - goosedragons 2y ago
      I'm more concerned with companies using it as a trust source to make running not-Windows not viable.
CuriousCosmic 2y ago
I don't know. I think Pluton is going to be a temporary thing until the alternatives are more mature. OpenTitan is a great option but it'll be at least another 2 or 3 years before it truly stabilizes and has at least some amount of battletesting in ARM chips as a secure enclave. Alternatively they may go with Caliptra as they've been involved in its development for a long time however it is a less mature option and it's not as flexible of a secure environment as OpenTitan is. The FOSS secure enclaves have a lot of heavy investment but it looks like the AI boom happened earlier than anyone really anticipated and Microsoft jumped the gun and demanded their SE environment because the other offerings weren't mature enough.

by 3np 2y ago

jitl 2y ago

This is Microsoft’s version of Apple’s “Secure Enclave” root of trust on Apple silicon devices. I’m always surprised about the negative reaction to TPM or Pluton, given (what I perceive as) the positive security/privacy opinion on Secure Enclave

deleted 2y ago
[deleted]
yoyohello13 2y ago
You presumably opt-in to Secure Enclave when you by Apple. With all the new CPUs implementing Pluton you can't opt out. I'm sure Linux users aren't interested in a backdoor created by Microsoft.
- lern_too_spel 2y ago
  The OS decides whether or not to expose it.
- eightysixfour 2y ago
  What do you mean you can't opt out? It just turns into a normal TPM if the OS doesn't use it.
  - goosedragons 2y ago
    I'm more concerned with companies using it as a trust source to make running not-Windows not viable.

CuriousCosmic 2y ago

I don't know. I think Pluton is going to be a temporary thing until the alternatives are more mature. OpenTitan is a great option but it'll be at least another 2 or 3 years before it truly stabilizes and has at least some amount of battletesting in ARM chips as a secure enclave. Alternatively they may go with Caliptra as they've been involved in its development for a long time however it is a less mature option and it's not as flexible of a secure environment as OpenTitan is. The FOSS secure enclaves have a lot of heavy investment but it looks like the AI boom happened earlier than anyone really anticipated and Microsoft jumped the gun and demanded their SE environment because the other offerings weren't mature enough.